Crate nixfleet_reconciler 

Pure planner + verification primitives for the RFC-0006 runtime.

Re-exports

pub use manifest::compute_rollout_id_for_channel;

pub use manifest::current_rollout_ids;

pub use manifest::project_manifest;

pub use trust_rotation::check_trust_rotations;

pub use verify::SignedSidecar;

pub use verify::Verified;

pub use verify::VerifiedFleet;

pub use verify::VerifiedRolloutManifest;

pub use verify::VerifyError;

pub use verify::canonical_hash_from_bytes;

pub use verify::compute_canonical_hash;

pub use verify::verify_artifact;

pub use verify::verify_bootstrap_nonces;

pub use verify::verify_revocations;

pub use verify::verify_rollout_manifest;

pub use verify::verify_signed_sidecar;

pub use planner::active_rollout_for_host;

pub use planner::compute_soak_due_at;

pub use planner::plan_next;

pub use planner_types::ChannelId;

pub use planner_types::ClosureHash;

pub use planner_types::FleetState;

pub use planner_types::GateBlock;

pub use planner_types::HostId;

pub use planner_types::PlanAction;

pub use planner_types::QuarantineSet;

pub use planner_types::RolloutSummary;

pub use planner_types::SignedManifestSet;

Modules

evidence

Probe-output signature verification. Pubkey is OpenSSH ssh-ed25519 ... sourced from hosts.<hostname>.pubkey.

manifest

Pure projection: fleet.resolved + channel context -> RolloutManifest. Producer (nixfleet-release) and CP (re-derivation) share this fn.

planner

Pure planner (RFC-0006 §4.1).

planner_gates

Planner gates over &FleetState (the v0.2 shape, replacing the v0.1 &Observed-based gates per RFC-0006 §12).

planner_types

Types consumed/produced by the new planner (RFC-0006 §4.1).

trust_rotation

Declarative key rotation. Emits Action::RotateTrustRoot when a slot’s retire_at has passed AND a successor is declared. Informational only - the CP NEVER self-mutates trust roots; the operator’s tooling promotes current -> previous, successor -> current in the next fleet commit.

verify

Sidecar fetch + verify + freshness-gate.

Structs

FleetResolved

RolloutId

Content-addressed rollout identifier (RFC-0008 §6.3).